Top Cybersecurity Jobs

Leads systems engineering and cybersecurity integration for Protected Key Management Architecture modernization within an enterprise SATCOM system. Develops requirements, acquisition documentation, technical roadmaps, risk assessments, test and certification strategies, and integration plans. Coordinates cryptographic key management across government, contractor, NSA, space, ground, terminal, and payload stakeholders. Supports technical baseline reviews, vendor analysis, executive briefings, and deployment milestones. The role requires an active Top Secret clearance and substantial experience supporting national security space or DoD programs.

Leads global cybersecurity operations across enterprise IT, cloud, customer-facing applications, connected platforms, and manufacturing OT. Manages internal teams and MSSP partners, 24/7 monitoring, incident response, detection engineering, threat hunting, SIEM/SOAR optimization, compliance, and operational metrics. Serves as incident commander for major security events and partners with plant, product, application, and executive stakeholders to strengthen detection, response, and resilience.

Leads cybersecurity and Risk Management Framework activities for Air Force defense systems, including security documentation, ATOs, continuous monitoring, eMASS administration, vulnerability management, STIG implementation, architecture reviews, and risk mitigation. Supports classified information security, acquisition program security, cross-domain solutions, compliance assessments, policy development, and leadership advisement. Delivers cybersecurity training and collaborates with government and commercial stakeholders. Requires extensive DoD experience, a bachelor’s degree, CISSP certification, US citizenship, and Top Secret clearance.

Leads cyber operational planning, enterprise architecture, systems integration, and IT modernization across complex infrastructure and cloud environments. Diagnoses network and systems issues, implements security controls, governs process improvements using SAFe and ITIL 4, and develops CONOPS, decision papers, training plans, and executive summaries. The role coordinates multiple transformation initiatives, translates strategic guidance into actionable cyber plans, and communicates technical recommendations to senior military and government leaders.

Designs and supports enterprise identity security across IAM, identity lifecycle management, identity governance, and privileged access management. Leads Zero Standing Privileges initiatives, including just-in-time provisioning, risk-adaptive policies, contextual authorization, and least-privilege access. Assesses cybersecurity risks, develops security requirements and architecture, maintains policies and procedures, and collaborates with business, technology, compliance, and audit stakeholders. Requires expertise with Okta, IGA tools, identity lifecycle concepts, Zero Trust, authentication protocols, and identity automation.

Lead and grow the attack surface management program by identifying, assessing, and prioritizing exposures; drive remediation and automation; collaborate with AppSec, DevOps, and cloud teams; maintain standards, runbooks, and attack surface maps; present risk metrics; mentor teammates; and lead compliance activities (e.g., PCI).

Leads cybersecurity operations including incident response, threat intelligence, vulnerability management, GRC, security monitoring, and risk reduction across cloud, endpoint, identity, and third-party environments. Investigates complex security events, coordinates containment and recovery, develops threat hunting strategies, improves security processes, maintains response documentation, delivers security awareness training, and supports cybersecurity planning for live events and venues. Serves as a cybersecurity subject matter expert and participates in after-hours incident response.

Supports cybersecurity planning, assessments, implementation, compliance, and continuous monitoring for Air Force infrastructure modernization. Coordinates RMF activities, DISA STIG validation, NIST control analysis, vulnerability remediation, POA&M development, eMASS documentation, accreditation packages, and cybersecurity reviews. The role validates controls throughout deployment and operational transition, collaborates with ISSMs and engineering teams, and requires active Secret clearance, DoD IAM/IAT certification, and 35% travel.

Leads CLS’s global Cybersecurity Operations function, setting strategy for threat detection, incident response, digital forensics, DLP, UEBA, Purple Teaming, and detective controls. Oversees security engineering, vendors, third-party integrations, governance, executive reporting, talent development, and regulatory alignment. The role requires extensive cybersecurity leadership experience in highly regulated environments, strong technical expertise across SIEM, SOAR, cloud and endpoint security, and the ability to direct complex cyber incident response programs.

Conduct cybersecurity audits, continuous monitoring, system and network assessments, security testing, and compliance analyses for classified information systems. Support Risk Management Framework Assessment and Authorization activities, including risk mitigation, security documentation, investigations, inspections, and preparation of the required body of evidence. The role is fully onsite in Linthicum, Maryland, requires an active Secret clearance, Security+ certification, and 10% travel.

Conduct cybersecurity control, vulnerability, software assurance, threat, and risk assessments for complex ballistic missile defense systems. Perform research, data gathering, gap analyses, capability maturity assessments, penetration testing support, security plan documentation, and implementation planning aligned with cybersecurity standards and the Risk Management Framework.

Designs and maintains cybersecurity controls under DoD RMF v5, manages ATO packages and eMASS documentation, conducts risk assessments, coordinates STIG remediation, monitors and responds to security incidents, and develops security policies and system documentation. The role requires collaboration with technical teams, autonomous workload management, and expertise in federal cybersecurity frameworks, operating systems, networks, cloud platforms, and security technologies.

Supports Defense Health Agency systems through cybersecurity certification and accreditation, RMF assessment and authorization, security documentation, vulnerability management, configuration management, audit reviews, and STIG compliance. Conducts self-assessments, vulnerability scans, POA&M development, and eMASS documentation to support IATT and ATO decisions. Coordinates with authorizing officials, system administrators, and cybersecurity personnel to maintain system security posture and accreditation compliance.

Designs and maintains application security capabilities across the software development lifecycle. Responsibilities include operating SAST, DAST, software composition analysis, and secrets-scanning tools; threat modeling; secure design and code reviews; vulnerability remediation; penetration testing; developer education; API, cloud, container, and software supply chain security; incident response; risk assessments; and application security program improvement.

Conducts in-depth investigations of escalated SIEM and security alerts, uses AI-driven tools to support threat detection and incident response, coordinates with threat intelligence teams and stakeholders, advises clients on countermeasures, and improves incident response playbooks and procedures while working fixed 12-hour shifts.

Supports cybersecurity and attraction system teams by documenting attraction security, installing and patching operating systems, testing PC-based ride and show control systems, troubleshooting hardware and software, creating dashboards, and communicating project status. The intern works onsite with cybersecurity personnel and ride/show control engineers to maintain attraction performance, reliability, and security.

Coordinates cybersecurity defense operations across NORAD, USNORTHCOM, CWOC, JCC, and NITES personnel. Manages Cyber Tasking Orders, IAVMs, directives, vulnerability remediation, and POA&M tracking. Develops cybersecurity SOPs, maintains compliance logs, coordinates stakeholders, and provides metrics and executive-level communications to military and civilian leadership.

Administer and optimize Trellix cybersecurity tools across enterprise Windows and Linux environments. Manage policies, deployments, endpoint health, detections, integrations with SIEM/SOAR and vulnerability platforms, dashboards, compliance, documentation, and incident response activities. Support endpoint forensics, containment, IOC sweeps, risk assessments, security control validation, and RMF/NIST compliance while coordinating with systems, network, and cybersecurity teams.

Reviews and updates DISA STIG checklists, ACAS scans, RMF control checklists, and cybersecurity compliance documentation. Develops quarterly STIG hardening guides, assesses Army intelligence infrastructure, recommends vulnerability remediation, and supports DoD 8140 Information Assurance Manager activities. Requires expertise with Tenable tools, eMASS, STIG Viewer, SCAP, Windows, RHEL, and VMware, plus an active TS/SCI clearance and Security+ and IAT Level III certification.

Designs and integrates enterprise cybersecurity solutions, with emphasis on cloud security architecture, secure migrations, vulnerability management, incident response, firewalls, IDS/IPS, and SIEM technologies. The role supports military cyberspace operations, evaluates cybersecurity tools, prepares technical security documentation, and collaborates with internal teams and external customers. Applicants must possess TS/SCI clearance and be able to obtain a CI Poly.

Leads cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Maintains SSPs, POA&Ms, SARs, and ATO artifacts; performs vulnerability scanning and remediation tracking; validates NIST and CNSSI controls; supports hardening, patching, STIG compliance, monitoring, incident response, and change-impact assessments. Collaborates with engineering, administration, and DevSecOps teams.

Lead cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Responsibilities include executing RMF processes, maintaining SSPs, POA&Ms, SARs, and ATO artifacts, managing vulnerability remediation, validating NIST and CNSSI controls, enforcing STIG compliance, hardening Windows, Linux, and network systems, monitoring environments, supporting incident response, and assessing security impacts of system changes.

Designs and oversees cybersecurity architecture, controls, documentation, monitoring, and compliance for cloud and tactical edge platforms in defense environments. The role applies Zero Trust, RMF, NIST, DISA STIGs, DevSecOps, vulnerability management, threat modeling, and incident response practices. It advises government and vendor stakeholders, validates security capabilities, supports DDIL operations, leads cybersecurity working groups, and briefs senior audiences. An active Secret clearance and extensive defense cybersecurity engineering experience are required.

Conduct advanced cybersecurity monitoring, incident detection, investigation, response, threat analysis, and security validation across on-premises and cloud environments. Perform authorized vulnerability validation, penetration-test finding reproduction, remediation verification, and application security testing. Develop incident-response procedures, testing methodologies, documentation, and playbooks while supporting offensive security, adversary emulation, and purple-team capabilities. Mentor junior analysts and collaborate with technical teams and government stakeholders.

Maintains Authority to Operate for Navy education and training systems by managing compliance, vulnerability remediation, incident response, access coordination, security documentation, and continuous monitoring. Supports DevSecOps security integration, cloud security architecture, risk management, cybersecurity reporting, stakeholder coordination, vendor engagement, and implementation of security tools and controls across classified and unclassified environments.